1 files changed, 30 insertions, 0 deletions
diff --git a/app-admin/sagan-rules/sagan-rules-20140617.ebuild b/app-admin/sagan-rules/sagan-rules-20140617.ebuild
new file mode 100644
index 00000000000..0194a6aa432
--- /dev/null
+++ b/app-admin/sagan-rules/sagan-rules-20140617.ebuild
@@ -0,0 +1,30 @@
+# Copyright 1999-2015 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+
+EAPI=4
+
+DESCRIPTION="Rules for Sagan log analyzer"
+HOMEPAGE="http://sagan.softwink.com/"
+SRC_URI="http://sagan.quadrantsec.com/rules/sagan-rules-06172014.tar.gz"
+
+LICENSE="BSD"
+SLOT="0"
+KEYWORDS="amd64 x86"
+IUSE="+lognorm"
+
+DEPEND=""
+RDEPEND="${DEPEND}"
+PDEPEND="app-admin/sagan"
+
+S=${WORKDIR}/rules
+
+src_install() {
+	insinto /etc/sagan-rules
+	doins ./*.config
+	doins ./*rules
+	doins ./*map
+	if use lognorm ; then
+		doins ./*normalize.rulebase
+	fi
+}